Searched hist:"3 dc6b1ce6861ebf40b68ab4b752a05584a1f99bf" (Results 1 – 1 of 1) sorted by relevance
| /openbmc/linux/security/apparmor/ |
| H A D | ipc.c | diff 3dc6b1ce6861ebf40b68ab4b752a05584a1f99bf Tue Dec 12 03:02:13 CST 2017 John Johansen <john.johansen@canonical.com> apparmor: make signal label match work when matching stacked labels
Given a label with a profile stack of
A//&B or A//&C ...
A ptrace rule should be able to specify a generic trace pattern with
a rule like
signal send A//&**,
however this is failing because while the correct label match routine
is called, it is being done post label decomposition so it is always
being done against a profile instead of the stacked label.
To fix this refactor the cross check to pass the full peer label in to
the label_match.
Signed-off-by: John Johansen <john.johansen@canonical.com>
|